Privacy Policy

Last updated: 20th July 2026

Gather Point is built to need as little of your data as possible. This page explains, plainly, what we collect, why, and what choices you have — for both attendees and organisers.

The short version

• Attendees don't have accounts. There's no sign-up, no profile, no way for us to identify who you are.
• We don't use tracking or advertising cookies.
• Attendees choose whether to accept cookies - you can opt in or out at any time, and the site still works either way.
• Organisers have accounts (name, email, password) because they're managing an event — that's the only place we hold anything that identifies a real person by default. Organisers require cookies for the purposes of logging in and accessing the system.
• Your event organiser may add their own content to the Platform — such as schedules, group names, or role lists — which could include names or details about attendees. That content is controlled by your organiser, not by us; see our Terms and Conditions for how we handle Customer-uploaded content.

For attendees

When you open an event link or enter an event code, we use two small pieces of storage on your device:

• An event cookie, so you don't have to re-enter your code every time you return. It stores the event's ID, not your identity, and it's only set if you accept essential storage — declining means the site still works for that visit, it just won't be remembered next time.
• An anonymous device identifier, created for the programme favourites to function and be remembered on your device. It's a random ID with nothing about you attached to it, used only so your favourites show up correctly if you come back. If favouriting is turned off by the organiser, or you decline essential storage, this is never created at all.

We don't know your name, your email, or anything else about you as an attendee — there's no form that asks, because there's no account to attach it to.

For organisers

Running an event requires an account: your name, email address, and a password (stored as a one-way hash — we can't see or recover your actual password, only verify it). We use this to let you sign in, send you account-related emails (an invitation link when your account is created, a reset link if you request one), and to record who made changes to your event's content, so a team can see who edited what.

We process this information on the basis of our legitimate interest in providing the service your organisation has contracted us to deliver, and in keeping your event content accurate and accountable within your team.

We don't use your email for marketing, and we don't share it with anyone outside the small set of providers that make the service run (our hosting providers, and the service we use to send account emails) — both bound to only use it for that purpose.

What we never do

• We don't sell or share data with advertisers.
• We don't track you across other websites.
• We don't build a profile of attendees — there's no attendee identity to build one from.

Where data is hosted

• Your account and event data — organiser accounts, event schedules, and anything else stored in our database — is held on servers in the EU.
• The Gather Point application (the service that processes your requests and enforces access to your event) also runs on servers in the EU.
• The website and app itself — the pages and code your browser or phone loads — is delivered through a global content delivery network, so it loads quickly wherever you are. This mainly involves serving already-published files rather than your personal data, but delivery infrastructure of this kind can incidentally process basic technical information (such as your IP address, for security and performance purposes) outside the UK and EU.

Where any processing like this does take place outside the UK or EU, we rely on legally recognised safeguards — such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses — to make sure your data continues to receive the same standard of protection.

Your rights

As an organiser, you can ask us to see, correct, or delete your account data at any time. As an attendee, since we don't hold anything identifying you, there's generally nothing to request — clearing your browser's cookies and site data removes everything we'd otherwise have stored on your device.

Questions

If anything here is unclear, you wish to raise a complaint, or you want to ask us anything about how your data is handled, email hello@gatherpoint.church.